“MCP and agent security”

MCP security hardening — credential leakage prevention, input sanitization, and tool access control.

AI 与 MCP 安全评估 — Prompt 注入、工具滥用、MCP 信任边界、Agent 权限逃逸、数据泄露、模型风险、GAARM 风险矩阵。Use when testing LLM-based applications, MCP servers, agent orchestration systems, AI…

Secure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls.

MCP (Model Context Protocol) 协议安全测试方法论。当目标环境使用 MCP Server 集成外部工具、 需要评估 MCP 工具描述安全性、或测试 Agent 通过 MCP 调用工具时的安全边界时触发。 覆盖: 工具描述投毒、地毯式骗局(动态篡改)、指令覆盖(Shadow…

Security patterns for MCP servers including OAuth 2.0, rate limiting, input validation, and audit loggingUse when "mcp security, mcp authentication, mcp…

AI Agent 系统安全测试方法论。当目标系统使用 AI Agent 执行工具调用、多 Agent 协作、 或自主决策时触发。覆盖 OWASP Agentic AI Security Top 10 (ASI01-ASI10): 目标劫持、工具滥用、身份权限、供应链、代码执行、记忆投毒、多 Agent 通信、…

Use when auditing a VPS-based Hermes agent setup for exposed dashboards, weak secret handling, broad keys, Docker risks, or missing backup/security…

Configure AWS Security Agent for the current workspace — provision or reuse an agent space, IAM service role, and S3 bucket.

Take a privately reported vulnerability through this repo's security advisory flow: board it as a draft card, check whether the code is this repo's server or…

AI/LLM security reasoning agent.

Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons.

Define, review, or update SECURITY_MODEL.md files that tell security review tools a repository's threat model, trust boundaries, invariants, reportable…

Deterministically generates source documents (Markdown) from the FISC "Security Guidelines on Computer Systems for Financial Institutions" (安対基準 / Antai…

Detect data leakage, missing boundaries, or privilege mismatch in inter-agent communication.

Security Agent context and behavior rules

Open security platform for agentic infrastructure — broad scanning plus MCP discovery, CVEs, blast radius, SBOMs, CIS benchmarks (AWS, Azure, GCP, Snowflake)…

Automatically load this skill when investigating application outages, service degradation, or errors that could have security-related root causes — including…

Secure coding agents, MCP/tool use and AI application tool-calling against prompt injection, excessive permissions and data exfiltration.

Use when an agent folder must pass the Agentlas Cloud 2-stage security scan (static rules + BYOK LLM judgment) before private sync or public publish, or when…

AGENTS.md from MobSF/Mobile-Security-Framework-MobSF: 245 lines covering Code Quality — Mandatory Before Every Commit, Security Architecture, Past…

Create, search, update, and manage SOC cases via the Kibana Cases API.

Expert guide for using n8n-mcp MCP tools effectively.

Design AI agent security — sandboxing, permissions, injection defences, output validation

Security best practices for secure coding, authentication, authorization, and data protection.